In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix netif state handling
mlx5e_suspend cleans resources only if netif_device_present() returns true. However, mlx5e_resume changes the state of netif, via mlx5e_nic_enable, only if reg_state == NETREG_REGISTERED. In the below case, the above leads to NULL-ptr Oops[1] and memory leaks:
mlx5e_probe _mlx5e_resume mlx5e_attach_netdev mlx5e_nic_enable <-- netdev not reg, not calling netif_device_attach() register_netdev <-- failed for some reason. ERROR_FLOW: _mlx5e_suspend <-- netif_device_present return false, resources aren't freed :(
Hence, clean resources in this case as well.
[1] BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD 0 P4D 0 Oops: 0010 [#1] SMP CPU: 2 PID: 9345 Comm: test-ovs-ct-gen Not tainted 6.5.0_for_upstream_min_debug_2023_09_05_16_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:0x0 Code: Unable to access opcode bytes at0xffffffffffffffd6. RSP: 0018:ffff888178aaf758 EFLAGS: 00010246 Call Trace: <TASK> ? __die+0x20/0x60 ? page_fault_oops+0x14c/0x3c0 ? exc_page_fault+0x75/0x140 ? asm_exc_page_fault+0x22/0x30 notifier_call_chain+0x35/0xb0 blocking_notifier_call_chain+0x3d/0x60 mlx5_blocking_notifier_call_chain+0x22/0x30 [mlx5_core] mlx5_core_uplink_netdev_event_replay+0x3e/0x60 [mlx5_core] mlx5_mdev_netdev_track+0x53/0x60 [mlx5_ib] mlx5_ib_roce_init+0xc3/0x340 [mlx5_ib] __mlx5_ib_add+0x34/0xd0 [mlx5_ib] mlx5r_probe+0xe1/0x210 [mlx5_ib] ? auxiliary_match_id+0x6a/0x90 auxiliary_bus_probe+0x38/0x80 ? driver_sysfs_add+0x51/0x80 really_probe+0xc9/0x3e0 ? driver_probe_device+0x90/0x90 __driver_probe_device+0x80/0x160 driver_probe_device+0x1e/0x90 __device_attach_driver+0x7d/0x100 bus_for_each_drv+0x80/0xd0 __device_attach+0xbc/0x1f0 bus_probe_device+0x86/0xa0 device_add+0x637/0x840 __auxiliary_device_add+0x3b/0xa0 add_adev+0xc9/0x140 [mlx5_core] mlx5_rescan_drivers_locked+0x22a/0x310 [mlx5_core] mlx5_register_device+0x53/0xa0 [mlx5_core] mlx5_init_one_devl_locked+0x5c4/0x9c0 [mlx5_core] mlx5_init_one+0x3b/0x60 [mlx5_core] probe_one+0x44c/0x730 [mlx5_core] local_pci_probe+0x3e/0x90 pci_device_probe+0xbf/0x210 ? kernfs_create_link+0x5d/0xa0 ? sysfs_do_create_link_sd+0x60/0xc0 really_probe+0xc9/0x3e0 ? driver_probe_device+0x90/0x90 __driver_probe_device+0x80/0x160 driver_probe_device+0x1e/0x90 __device_attach_driver+0x7d/0x100 bus_for_each_drv+0x80/0xd0 __device_attach+0xbc/0x1f0 pci_bus_add_device+0x54/0x80 pci_iov_add_virtfn+0x2e6/0x320 sriov_enable+0x208/0x420 mlx5_core_sriov_configure+0x9e/0x200 [mlx5_core] sriov_numvfs_store+0xae/0x1a0 kernfs_fop_write_iter+0x10c/0x1a0 vfs_write+0x291/0x3c0 ksys_write+0x5f/0xe0 do_syscall_64+0x3d/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 CR2: 0000000000000000 ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-modulesUpgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-headers | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 13, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04 | May 20, 2025 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub